If you're self hosting roundcube be sure to update.
Roundcube Webmail Flaws Allow Hackers to Steal Emails and Passwords
https://thehackernews.com/2024/08/roundcube-webmail-flaws-allow-hackers.html?m=1
https://thehackernews.com/2024/08/roundcube-webmail-flaws-allow-hackers.html?m=1
If you're self hosting roundcube be sure to update.
4 Comments
cheddar@programming.dev · 33 pts · 2y
I'm not surprised. A cube can't be round. That's an obvious design flaw.
shadowbert@lemmy.world · 2 pts · 2y
It's only if you view a specifically crafted email in the web client... still worth upgrading of course.
atzanteol@sh.itjust.works · 6 pts · 2y
Only? "Viewing emails in a web browser" is the entire point of roundcube. It's trivial to send out millions of "specially created emails" looking for a victim.
shadowbert@lemmy.world · 3 pts · 2y
True, but it presumably would still require the user to open them.
But, I was mostly worried that just having the server installed would be enough.